Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: Dyj1rbHjJYCg+xHFwOXdeyQPNiJBEqLfFF2uQ0zWCSE=
Subject key identifier: D9:AA:6E:C8:60:07:C1:4B:5C:93:02:C7:F9:21:EB:AB:CD:CD:9E:51
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019A270B4695E7C3809EC9ABC829FB20584A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1700
Signing time: Mon 27 Oct 2025 19:00:41 +0000
Manifest this update: Mon 27 Oct 2025 19:00:41 +0000
Manifest next update: Tue 28 Oct 2025 19:00:41 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: wABypwtYixWEum1TpF3eAyKxpqJCgoeuuhoab9sLu6Q=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:46:95:e7:c3:80:9e:c9:ab:c8:29:fb:20:58:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Oct 27 19:00:41 2025 GMT
Not After : Oct 28 19:00:41 2025 GMT
Subject: CN=d9aa6ec86007c14b5c9302c7f921ebabcdcd9e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:24:df:5f:33:d9:fd:39:8b:b1:42:fd:3a:
ea:53:c1:7d:13:19:ec:b2:02:c9:0b:71:95:9b:5c:
91:76:86:ea:2d:89:6a:64:fc:10:56:47:b2:3b:7b:
11:be:08:aa:74:b8:65:c1:d4:ac:3a:05:10:89:50:
35:ae:4e:a5:ba:b2:2b:85:83:ba:59:d2:39:92:48:
ef:90:a1:91:ab:fa:dd:e9:ba:b1:34:5a:eb:6a:59:
e5:e6:0c:e9:84:71:32:86:40:80:6b:e3:bf:48:e0:
97:1b:62:c0:9d:29:50:52:d9:86:8b:70:59:d6:f3:
29:e9:5a:0d:1a:be:28:1c:ac:a5:5a:a5:30:0b:a8:
a4:d3:a3:36:0d:47:35:0e:a2:bd:51:e2:4c:fc:d6:
f1:22:54:e1:14:a2:c6:c6:ea:32:4a:c8:7a:04:71:
f7:7e:bd:ec:1f:4c:9d:33:bb:a5:51:c9:03:3d:17:
f4:5e:92:6f:ab:14:6e:2f:0a:c8:18:6d:60:42:8d:
02:53:51:2c:a5:56:a2:0b:af:34:25:de:48:65:eb:
09:2c:3c:d0:4f:5b:8c:40:98:fe:07:08:ba:a8:33:
2e:cd:14:8a:9e:8b:3d:d6:37:d2:c1:e2:64:d2:c2:
91:38:8e:bd:53:73:38:17:5a:da:4c:dd:5f:48:fd:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:6E:C8:60:07:C1:4B:5C:93:02:C7:F9:21:EB:AB:CD:CD:9E:51
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:70:2e:d4:79:70:16:87:00:bf:cc:b6:8b:20:c6:a6:9c:60:
b0:f5:cd:fa:7d:27:f7:f8:b8:84:98:73:fc:4c:fc:08:58:04:
80:8f:ec:59:26:72:b8:13:2e:26:95:10:ea:79:ca:a8:47:e4:
cc:93:3f:a0:02:0f:f5:0f:61:3c:2c:bc:51:a0:d5:a0:5b:04:
78:d8:22:5e:8a:73:7f:f4:c0:cb:d6:15:86:1d:0e:54:9c:d5:
8b:79:aa:8d:c1:fd:1c:79:ae:4b:68:57:9c:7b:4d:d7:d6:d2:
21:63:75:69:05:cc:a7:36:60:34:d3:7c:94:41:68:4e:5b:1e:
cc:9c:f1:0c:97:d4:86:58:31:86:28:e7:a9:d6:10:19:d9:8b:
0e:8e:e8:dc:5c:f5:20:7e:d7:7c:6a:f5:1f:e0:a5:91:8a:0a:
05:1a:6a:5f:42:55:93:96:fc:bc:a3:aa:4a:f4:c1:c2:48:be:
e4:89:4f:03:6b:cf:99:fb:b0:d1:45:75:c8:c8:1a:b7:6b:f4:
0f:bd:24:57:47:f6:bb:09:84:ca:eb:ec:5b:0d:43:81:69:00:
cd:12:fd:d7:85:cb:fa:fd:3a:19:ba:9d:e1:72:50:72:53:7f:
9a:09:01:bb:bb:1c:47:cc:8b:bb:d1:81:13:92:46:46:31:a9:
a9:9c:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:00:42 2025 by rpki-client